Even just reverse proxy in front (written in C++, naturally) would have probably saved the situation.